cancel
Showing results for 
Search instead for 
Did you mean: 
athrah
Level 7

HIPS & USB

Hi all,

I have an urgent question regarding HIPS & USB

Is there any way that we can use HIPS to block USB or in another way Scan USB, Clean and Block it if it was unable to be cleaned ?

waiting you urgent request,

Best Regards,

Athra

0 Kudos
4 Replies
dyilmaz
Level 9

Re: HIPS & USB

Hi,

there is a Signature implemented which can Block USB Devices but you can not use it to unblock when the Device was Scanned by VSE for instance.

HIP Signature 1157 - USB Storage Inserted

regards

0 Kudos
athrah
Level 7

Re: HIPS & USB

Thank you

but that does not help in my case as its going to block all USB usage.

I want the USB to be scanned then blocked if something found.

0 Kudos
dyilmaz
Level 9

Re: HIPS & USB

Sorry but it will not be working with Hips as this would need a Dynamic Block Rule which only gets active when VSE would tell to HIP it has found Malware and the device needs to be Quarantined/Blocked.

An automatic ODS Scan of the inserted USB Drive would be helpful but as far as i know there is no builtin option yet.

With the above said feel free to submit a Feature Addition to VSE for example:

https://kc.mcafee.com/corporate/index?page=content&id=KB60021

0 Kudos
McAfee Employee

Re: HIPS & USB

This functionality is actually is more aligned with data leakage than host intrusion prevention. I'd suggest checking McAfee DLP for the feature.

0 Kudos